Privacy Policy

Last updated: March 30, 2026 · Effective: March 30, 2026

Sunday Sauce LLC ("we," "us," or "our") operates the Sunday Sauce mobile application ("App"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the App. We are committed to protecting your privacy and being transparent about our data practices.

1. Information We Collect

Account Information

When you create an account, we collect your email address and display name. You may also sign in using Apple Sign In, in which case Apple provides us with your name and email address (or a private relay email) according to your Apple ID settings.

Usage Data

We collect information about how you use the App, including which guides and recipes you interact with, session duration, session history, and your session credits balance.

Voice and Conversation Data

During live cooking sessions, your voice audio is streamed in real time through LiveKit to Deepgram for speech-to-text conversion. We do not store raw audio recordings after sessions end. Text transcripts of your conversations with AI guides may be temporarily retained for session continuity (e.g., resuming an interrupted session). Conversation data is deleted after 30 days.

Device Information

We collect basic device information including device type, operating system version, and app version for compatibility and troubleshooting purposes.

Purchase Information

When you purchase session credits, transaction records are processed by Apple and managed through RevenueCat. We do not collect or store your payment card information. We receive purchase confirmation data including product purchased, date, and transaction identifier.

2. AI Processing and Third-Party Data Sharing

Your cooking sessions are powered by artificial intelligence. The following third-party AI services process your data during sessions:

• Anthropic (Claude) — Your conversation text is sent to Anthropic's Claude API for generating guide responses. Anthropic processes this data according to their privacy policy. Anthropic does not use API inputs to train their models.
• Deepgram — Your voice audio is streamed to Deepgram for real-time speech-to-text conversion. Deepgram processes audio according to their privacy policy.
• Cartesia — Guide text responses are sent to Cartesia for voice synthesis (text-to-speech). Cartesia processes this data according to their privacy policy.
• LiveKit — Provides the real-time audio infrastructure for live sessions. LiveKit processes audio streams according to their privacy policy.

These services receive only the data necessary to provide their specific function during your cooking session. We have data processing agreements with each provider.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the App and cooking sessions.
• Process your purchases and manage session credits.
• Enable session resumption if a session is interrupted.
• Communicate with you about your account, purchases, or App updates.
• Analyze usage patterns to improve the App experience (using anonymized data).
• Ensure the safety and security of the App.
• Comply with legal obligations.

4. Data Sharing

We do not sell your personal information to third parties.

We share your data only with the following service providers, solely for the purposes of operating the App:

• Supabase — Authentication, database, and account management.
• Anthropic — AI conversation processing (as described in Section 2).
• Deepgram — Speech-to-text processing (as described in Section 2).
• Cartesia — Text-to-speech processing (as described in Section 2).
• LiveKit — Real-time audio infrastructure (as described in Section 2).
• RevenueCat — In-app purchase management.
• Apple — App Store purchases and Sign In with Apple.

We may also disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5. Data Retention

• Account data is retained for as long as your account is active. Upon account deletion, your data is removed within 30 days.
• Session conversation data is retained for up to 30 days for session continuity, then deleted.
• Voice audio is processed in real time and not stored after the session ends.
• Purchase records are retained as required for financial and legal compliance.
• Analytics data is retained in anonymized, aggregated form.

6. Your Rights

All Users

You have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and personal data.
• Delete your account at any time through the App's settings.

EU/EEA Users (GDPR)

If you are located in the EU or EEA, you have additional rights under the General Data Protection Regulation, including:

• Right of access (Art. 15) — obtain a copy of your personal data.
• Right to rectification (Art. 16) — correct inaccurate data.
• Right to erasure (Art. 17) — request deletion of your data.
• Right to restriction (Art. 18) — restrict processing in certain circumstances.
• Right to data portability (Art. 20) — receive your data in a structured, machine-readable format.
• Right to object (Art. 21) — object to processing based on legitimate interests.
• Right to withdraw consent at any time, without affecting the lawfulness of prior processing.
• Right to lodge a complaint with your local data protection supervisory authority.

Our lawful bases for processing are: contract performance (providing the service), legitimate interests (security, improvement), and consent (where applicable).

California Users (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose.
• Request deletion of your personal information.
• Opt out of the sale or sharing of personal information. We do not sell or share your personal information.
• Non-discrimination for exercising your privacy rights.

Exercising Your Rights

To exercise any of these rights, contact us at sundaysauceapp@gmail.com. We will respond to your request within 30 days (or sooner as required by applicable law).

7. Data Security

We implement industry-standard security measures to protect your personal information, including encrypted connections (TLS), row-level security on our database, and secure authentication. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

The App is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we discover that we have collected personal information from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us at sundaysauceapp@gmail.com.

9. International Data Transfers

Your data may be processed in the United States, where our service providers (Supabase, Anthropic, Deepgram, Cartesia, LiveKit, RevenueCat) operate. If you are located outside the United States, your data will be transferred to and processed in the United States. For EU/EEA users, these transfers are protected by standard contractual clauses or equivalent safeguards as required by GDPR.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the App or by email. The "Last updated" date at the top reflects the most recent revision. Your continued use of the App after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Sunday Sauce LLC
Email: sundaysauceapp@gmail.com